Thursday, May 8, 2025

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library

Home
Security Creators Network
Webinars
Events
- Upcoming Events
- On-Demand Events
Sponsored Content
Chat
Library
Related Sites
Media Kit
About
Sponsor

Analytics
AppSec
CISO
Cloud
DevOps
GRC
Identity
Incident Response
IoT / ICS
Threats / Breaches
More
Humor

Russian Cyber War

Psychedelic doctor image, titled “Bad Medicine”

Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

Richi Jennings | May 24, 2024 | Ascension, Black Basta Ransomware, Conti, Conti Gang, Conti ransomware, Conti Ransomware Gang, exposed healthcare records, health care, health care organizations, Health Care Security, Health Insurance Portability and Accountability Act (HIPAA), healthcare, Healthcare company, Healthcare Compliance, Healthcare Compliance & Security, HIPAA, HIPAA Compliance, hipaa laws, RaaS, Ransomware, Ransomware-as-a-Service (RaaS), Russia, russia hacker, russia-based, russian, Russian Cyber War, Russian cybercrime, Russian government, Russian hacker, Russian hackers, Russian hacking, Russian malware, SB Blogwatch

Inglorious Basta(rds): 16 days on, huge hospital system continues to be paralyzed by ransomware—and patient safety is at risk ...

Security Boulevard

Closeup photo of street go and stop signage displaying Stop

FBI/CISA Warning: ‘Black Basta’ Ransomware Gang vs. Ascension Health

Richi Jennings | May 13, 2024 | #StopRansomware, Ascension, Benefits of healthcare software, Black Basta Ransomware, cisa, CISA Threat Update, CISA warning, CISA.gov, Conti, Conti Gang, Conti ransomware, Conti Ransomware Gang, exposed healthcare records, health care, health care organizations, Health Care Security, Health Insurance Portability and Accountability Act (HIPAA), healthcare, Healthcare company, Healthcare Compliance, Healthcare Compliance & Security, HIPAA, HIPAA Compliance, hipaa laws, NSA/CISA, RaaS, Ransomware, Ransomware-as-a-Service (RaaS), Russia, russia hacker, russia-based, russian, Russian Cyber War, Russian cybercrime, Russian government, Russian hacker, Russian hackers, Russian hacking, Russian malware, SB Blogwatch

Будет! Russian ransomware rascals riled a Roman Catholic healthcare organization ...

Security Boulevard

FBI Warns: Ubiquiti EdgeRouter is STILL Not Secure

Richi Jennings | February 28, 2024 | APT28, Botnet disruption, Botnet Takedown, botnets, CVE-2023-23397, EdgeRouter, Fancy Bear, FBI warning, GRU, IC3, IC3.gov, Military Unit 26165, nsa, NSA/CISA, NTLM, NTLM Authentication, NTLM hash, NTLM leak, ntlm relay, Russia, russia hacker, russia-based, russian, Russian Cyber Interests, Russian Cyber War, SB Blogwatch, Ubiquiti, Ubiquiti breach, Ubiquiti Inc., Ubiquiti Networks, US FBI

GRU APT28 is back again: Fancy Bear still hacking ubiquitous gear, despite patch availability ...

Security Boulevard

A caricature of Russian president-for-life Vladimir Vladimirovich Putin, with superimposed text “no .ru for you”

Russian Internet Outage: DNSSEC Oops or Ukraine Hack?

Richi Jennings | January 31, 2024 | dns, DNS Attacks, DNS hijack, DNS hijacking, DNSSEC, Russia, Russia Exodus, Russia-Ukraine, russia-ukraine conflict, Russia's War on Ukraine, russian, Russian Cyber War, SB Blogwatch

It was DNS. It’s always DNS: Government ministry denies hackers hacked its network infrastructure ...

Security Boulevard

Microsoft CEO Satya Nadella, with superimposed text: “Russia hacked me”

Russia Hacked Microsoft Execs — SolarWinds Hackers at it Again

Richi Jennings | January 23, 2024 | APT29, azure, Azure cloud, Cozy Bear, lateral attack, lateral movement, LateralMovement, Microsoft, Microsoft 365, Midnight Blizzard, password spraying, Russia, Russian Cyber War, Russian cybercrime, Russian FSB, Russian hacker, Russian hackers, Russian hacking, Russian Threat Actors, SB Blogwatch

AKA APT29: Midnight Blizzard / Cozy Bear makes it look easy (and makes Microsoft look insecure) ...

Security Boulevard

The Ukrainian president, Volodymyr Zelenskyy, with superimposed text: “Bring it.”

Russia Hacks Ukraine, Ukraine Hacks Russia — Day#658

Richi Jennings | December 13, 2023 | Kyivstar, Russia, russia hacker, Russia-Ukraine, russia-ukraine conflict, Russia's War on Ukraine, Russian Cyber War, Russian cybercrime, SB Blogwatch, Ukraine, ukraine conflict, Ukraine Cyber War, Ukraine cyberattack

When will it end? Russia takes down Kyivstar cellular system, Ukraine destroys Russian tax system ...

Security Boulevard

A caricature of Russian president-for-life Vladimir Vladimirovich Putin

Russian FSB Targets US and UK Politicians in Sneaky Spear-Phish Plan

Richi Jennings | December 8, 2023 | 2FA phishing, advanced phishing threats, Aleksandrovich Peretuatko, Alexey Doguzhiev, Andrey Stanislavovich Korinets, Callisto Group, center 18, Evilginx, Federal Security Service, five eyes, FSB, linkedin, Phishing, Russia, russia hacker, russia-based, russian, Russian Cyber Interests, Russian Cyber War, Russian FSB, SB Blogwatch, Seaborgium, spear fishing, spear phishing attacks, spear-phishing, SpearPhishing, Star Blizzard, TA446

TA446’s new TTPs: “Star Blizzard” FSB team called out by Five Eyes governments (again) ...

Security Boulevard

A closeup of a USB drive

‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War Zone

Richi Jennings | November 22, 2023 | APT, Aqua Blizzard, Armageddon, computer worm, Flash drive, FSB, Gamaredon, Iron Tilden, LitterDrifter, Malware, Primitive Bear, Russia, russia hacker, Russia-Ukraine, russia-ukraine conflict, Russia's War on Ukraine, Russian Cyber War, Russian cybercrime, Russian FSB, SB Blogwatch, self-replicating worm, Shuckworm, Trident Ursa, Ukraine, ukraine conflict, Ukraine Cyber War, Ukraine cyberattack, Ukraine/European Security, USB, USB malware, USB Sticks, worm, worms

FSB APT USB VBS LNK DLL: WTH? Flash drive sharing malware escapes Україна. Gamaredon fingered as perps ...

Security Boulevard

COSMICENERGY: ‘Russian’ Threat to Power Grids ICS/OT

COSMICENERGY: ‘Russian’ Threat to Power Grids ICS/OT

Richi Jennings | May 26, 2023 | COSMICENERGY, electric grid, electrical grid, Electrical grids, energy grid, grid cyber attack, ICS, IEC 60870-5-104, IEC-104, INCONTROLLER, Industroyer, Industroyer2, Malware, OT, power grid, Power-Grid Security, Red Team, Red team exercises, red team operations, red team testing, Red Teaming, Red Teams, red-team-tools, redteam, Russia, Russia Exodus, Russia power grid, Russia-Ukraine, russia-ukraine conflict, Russia's War on Ukraine, russian, Russian Cyber War, SB Blogwatch, Solar Polygon, triton, TRITON ICS malware, Triton malware

Shouty name—dangerous game. Red-team tool ripe for misuse ...

Security Boulevard

Techstrong TV

Click full-screen to enable volume control

Watch latest episodes and shows

Mobility Field Day

Upcoming Webinars

Software Supply Chain Security: Navigating NIST, CRA, and FDA Regulations

Is DevEx the Same as DevSecOps?

Podcast

Listen to all of our podcasts

Press Releases

GoPlus's Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

Subscribe to our Newsletters

Most Read on the Boulevard

Beyond Traditional Vendor Management: Navigating AI Risks in the Supply Chain

Are You Too Reliant on Third-Party Vendors for Cybersecurity?

IRONSCALES Extends Email Security Platform to Combat Deepfakes

Why EASM Projects Fail: Three Pitfalls to Avoid

U.S. Wins One, Maybe Two, Extradition Petitions in Unrelated Cases

Urgent Warning for Gmail Users: 1.8 Billion Accounts at Risk

Why Ransomware Isn’t Just a Technology Problem (It’s Worse)

Strengthening Software Security Under the EU Cyber Resilience Act: A High-Level Guide for Security Leaders and CISOs

RSAC 2025: The Unprecedented Evolution of Cybersecurity

The Rise of AI-Powered Bots in Payment Fraud & How FinTechs Can Protect Themselves

Industry Spotlight

Cloud Security Cybersecurity Data Privacy Data Security Endpoint Featured Industry Spotlight Malware Mobile Security Network Security News Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threat Intelligence

SMBs Know They’re At Risk, but Most Aren’t Embracing AI

May 8, 2025 Jeffrey Burt | 1 hour ago 0

Cloud Security Cyberlaw Cybersecurity Data Security Featured Identity & Access Industry Spotlight Malware Network Security News Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

U.S. Wins One, Maybe Two, Extradition Petitions in Unrelated Cases

May 5, 2025 Jeffrey Burt | 3 days ago 0

Cloud Security Cybersecurity Data Privacy Data Security Featured Identity & Access Industry Spotlight Malware Mobile Security Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threat Intelligence Threats & Breaches

California Man Will Plead Guilty to Last Year’s Disney Hack

May 5, 2025 Jeffrey Burt | 3 days ago 0

Top Stories

Cloud Security Cyberlaw Cybersecurity Data Security Featured Mobile Security Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

Trump Proposes Cutting CISA Budget by $491 Million

May 7, 2025 Jeffrey Burt | Yesterday 0

Cloud Security Cyberlaw Cybersecurity Data Privacy Data Security Featured Identity & Access Malware Mobile Security Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

Spyware Maker NSO Ordered to Pay WhatsApp $168 Million for 2019 Hack

May 7, 2025 Jeffrey Burt | Yesterday 0

AI and ML in Security Cybersecurity Deep Fake and Other Social Engineering Tactics News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threats & Breaches Vulnerabilities

IRONSCALES Extends Email Security Platform to Combat Deepfakes

May 5, 2025 Michael Vizard | 3 days ago 0

Download Free eBook

7 Must-Read eBooks for Security Professionals

Join the Community

Add your blog to Security Creators Network
Write for Security Boulevard
Bloggers Meetup and Awards
Ask a Question
Email: [email protected]

Useful Links

About
Media Kit
Sponsor Info
Copyright
TOS
DMCA Compliance Statement
Privacy Policy

Related Sites

Techstrong Group
Cloud Native Now
DevOps.com
Digital CxO
Techstrong Research
Techstrong TV
Techstrong.tv Podcast
DevOps Chat
DevOps Dozen
DevOps TV

Powered by Techstrong Group

Copyright © 2025 Techstrong Group Inc. All rights reserved.

Security in AI

Step 1 of 7

14%

How would you best describe your organization's current stage of securing the use of generative AI in your applications?(Required)

We don’t have or use generative AI in our applications

Nothing significant yet - We have or will have generative AI in our applications but haven’t yet researched or explored the possibility of securing it.

Starting - We have begun to work on securing generative AI in our applications.

Developing - We have started to implement some security measures for generative AI.

Average - We have some policies or tools in place.

Advanced - We have some enhanced security protocols specifically tailored for generative AI in our applications.

Very advanced - We have comprehensive, mature, and proactive security solutions for generative AI in our applications.

Have you implemented, or are you planning to implement, zero trust security for the AI your organization uses or develops?(Required)

Already implemented

Planning to implement

Considering or scoping to implement

Not considering zero trust for AI

Do not use zero trust at all

Don’t know

What are the three biggest challenges your organization faces when integrating generative AI into applications or workflows? (Select up to three)(Required)

Intellectual property protection

Cost to implement

Integration capabilities of current systems

Compliance with standards and regulations

Data security or privacy

Security of prompts or responses

Potential impacts on performance or scalability of the applications

Potential impacts on performance or scalability of the AI

Access security

Lack of expertise or experience

How does your organization secure proprietary information used in AI training, tuning, or retrieval-augmented generation (RAG)? (Select all that apply)(Required)

Encryption at rest

Encryption in transit

Data access control, monitoring

Data anonymization

Data/information isolation

Data masking/tokenization

Data governance policies

Zero trust / continuous authentication and authorization

No specific measures in place

Which of the following kinds of tools are you currently using to secure your organization’s use of generative AI? (select all that apply)(Required)

Native cloud service tools (AWS Guardrails, e.g.)

Third-party tools

Custom in-house tools

No specific tools

How valuable do you think it would it be to have a solution that classifies and quantifies risks associated with generative AI tools?(Required)

Extremely valuable

Very valuable

Somewhat valuable

Not valuable

What are, or do you think would be, the most important reasons for implementing generative AI security measures? (Select up to three)(Required)

Regulatory compliance

Protecting intellectual property

Mitigating potential data breaches

Maintaining customer trust

Competitive advantage

Improved risk management

Increased operational efficiency

Don’t know

Δ